The most damaging cyber events often expose failures in recover, not security. Through the lens of high-profile disruptions affecting MGM, Change Healthcare, and Ascension, this session reveals the difference between having a recovery plan and successfully executing one. Participants will uncover the most common continuity and disaster recovery weaknesses, gain insight into the future of resilience expectations, and learn practical strategies designed specifically for community banks.

Learning Objectives:

• Identify the recovery planning failures behind MGM, Change Healthcare, and Ascension, and recognize whether the same gaps exist in your own institution.
• Differentiate between a DR plan that passes an exam and a DR program that actually survives a real event, using five recovery assumptions that keep proving wrong.
• Identify three concrete, low-cost actions to close your recovery gap before the next exam cycle or event— and language to bring the case to your board.